Security policy - Datachain Core

The application is delivered as docker images, based on standard source images (Linux image, PostgreSQL image, Java image, etc.)

The source images used are updated daily on our infrastructures. As a result, deploying a new version always uses the most up-to-date version of the source images, ensuring the most current patch level.

In addition, we limit the installation of executables other than the solution itself to a very small number, in order to keep images small and to limit the attack surface.

All ports exposed by the applications are described in the configuration page.

In terms of user access, only the applications that contain the web applications (web_ui component, console (beta), marketplace (beta)) should be exposed.